Home > Vulnerability Database > CVE-2006-1732

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-1732

Date: April 14, 2006

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to bypass same-origin protections and conduct cross-site scripting (XSS) attacks via unspecified vectors involving the window.controllers array.

Severity Score

3.7

Related Resources (55)

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/25818

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1887

Url: http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml

Url: http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html

Url: http://secunia.com/advisories/19811

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1

Url: http://www.vupen.com/english/advisories/2006/3391

Url: http://secunia.com/advisories/19852

Url: http://secunia.com/advisories/19780

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:075

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:076

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-1732

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:078

Url: http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=313373

Url: http://www.debian.org/security/2006/dsa-1044

Url: http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm

Url: http://secunia.com/advisories/19902

Url: http://www.securityfocus.com/archive/1/436296/100/0/threaded

Url: http://secunia.com/advisories/19823

Url: http://secunia.com/advisories/19746

Url: http://secunia.com/advisories/19821

Url: http://secunia.com/advisories/19862

Url: http://secunia.com/advisories/19794

Url: http://secunia.com/advisories/21622

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-1732

Url: http://www.securityfocus.com/archive/1/436338/100/0/threaded

Url: http://secunia.com/advisories/20051

Url: http://www.securityfocus.com/bid/17516

Url: http://www.vupen.com/english/advisories/2006/1356

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1

Url: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt

Url: http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html

Url: http://secunia.com/advisories/19714

Url: http://secunia.com/advisories/19759

Url: http://secunia.com/advisories/19631

Url: http://secunia.com/advisories/19950

Url: http://www.redhat.com/support/errata/RHSA-2006-0330.html

Url: http://www.novell.com/linux/security/advisories/2006_04_25.html

Url: http://www.securityfocus.com/archive/1/438730/100/0/threaded

Url: https://usn.ubuntu.com/276-1/

Url: http://secunia.com/advisories/21033

Url: http://www.redhat.com/support/errata/RHSA-2006-0328.html

Url: http://secunia.com/advisories/19729

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10232

Url: http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html

Url: http://www.mozilla.org/security/announce/2006/mfsa2006-17.html

Url: ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc

Url: http://secunia.com/advisories/19721

Url: https://usn.ubuntu.com/271-1/

Url: http://www.redhat.com/support/errata/RHSA-2006-0329.html

Url: http://secunia.com/advisories/19696

Url: http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml

Url: https://usn.ubuntu.com/275-1/

Url: https://www.mend.io/vulnerability-database/CVE-2006-1732

Severity Score

3.7

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us